MAL-2025-5748 Malicious code in @nomicsfoundation/web3-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8be3c236328576fc8bb353a6101fbbf35e483b67f019623f8d2f7538898b568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jwoiesk11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8272ab239b8e1ffc477bd4ffb90538ddeb7d1cd11f6bba6b8ee8a396aeafdb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5749 Malicious code in homiersla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18b688a5a2d22b21d1e643d311c8364a0d6d26d28c537c6e4fbf1a00f7dc12ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5713 Malicious code in oneapi-environment-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b59cc2d584cc83aeb72d1b1e463e2f4423a81b86d2fa4b7a2bdcf7867bba348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-iot-twinmaker-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7f0ee041fd32ff1222732d276760eea9a8547107ad0492a0654088ddfb85381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bankersbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b58330b4e53f3d1ec772627abe8ab65d077ab40fa89bd51741ebf8ec708f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5693 Malicious code in frontend-release-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7b669533af76df1c26a09f15c4e4251d5ebc14cfaceae8a7af9dacbe4f8741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mulle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15589f9b2ebb828fe096efdaeef76974f774119ab4db373e4d9d5735399909f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5683 Malicious code in css-keylogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d7d5c0eac76577da5186e985efd72018e773d9ada891e44852188b9e5cd8632 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5682 Malicious code in create-app-attachment-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c953841a642283b64ae3a2782a5904f4aeb52efcb9b9d091c106ec140f993559 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in haha-sana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d94333a699bc404222efee057cfa9fb0a098160612cbb2f645065f273f841214 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5716 Malicious code in phone-mockup-react-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f6a1418f459219963b15e9792b3f8721f33e7d7f3bf802a570652c6f3a5faad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5708 Malicious code in modules9382 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65a087c59c3c0f929ea8866c114728420dfd67459abc44b2ea2830382108127e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5727 Malicious code in scriptstierium11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e266c41818b3bf14da762f866026f1e266e51c7991db31ff0b165c66cd7ba04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5731 Malicious code in sync365 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2003136f074fe6e477c1a6a3458258fb4a9b375093b0520cafc082e4ff537f39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-27058 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption while processing packet data with exceedingly large packet...

CVE-2025-27058 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption while processing packet data with exceedingly large packet...

MAL-2025-5735 Malicious code in vite-plugin-enhance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8e3c636dfa64944d7dbd44dcd69bf2d040855dec38d508810590f76a1deb54e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5686 Malicious code in elbol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b99a8bf6adb423e7d8328ec1e179ba48ee34d663ab80a55b1c27d156605413f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mark-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d23383a480fcca63e03f17e636f2b8b0ac1605237d730c7ccf159e9ea082f39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...